From 63d82af2686f65fbee680be1ea4ced4e63e10af0 Mon Sep 17 00:00:00 2001
From: Brad Stein <Brad.Stein@gmail.com>
Date: Sun, 7 Sep 2025 14:31:53 -0500
Subject: [PATCH] jitsi corrections

---
 services/jitsi/deployment.yaml | 16 +++++++++-------
 1 file changed, 9 insertions(+), 7 deletions(-)

diff --git a/services/jitsi/deployment.yaml b/services/jitsi/deployment.yaml
index 0cd247f..36eae36 100644
--- a/services/jitsi/deployment.yaml
+++ b/services/jitsi/deployment.yaml
@@ -106,6 +106,7 @@ spec:
           ports:
             - { name: colibri-ws, containerPort: 9090, protocol: TCP }   # WebSocket control channel
             - { name: rtp-udp, containerPort: 10000, hostPort: 10000, protocol: UDP }  # media
+            - { name: rtp-tcp,   containerPort: 4443,  hostPort: 4443,  protocol: TCP }
           env:
             - { name: XMPP_DOMAIN, value: "meet.jitsi" }
             - { name: XMPP_AUTH_DOMAIN, value: "auth.meet.jitsi" }
@@ -118,10 +119,13 @@ spec:
             - { name: JVB_BREWERY_MUC, value: "jvbbrewery" }
             - { name: JVB_PORT, value: "10000" }             # matches hostPort above
             - { name: ENABLE_COLIBRI_WEBSOCKET, value: "1" } # enables /colibri-ws
-            - { name: JVB_STUN_SERVERS, value: "stun.l.google.com:19302,stun1.l.google.com:19302,meet-jit-si-turnrelay.jitsi.net:443" }
-            # For pure speed you can advertise your public IP here if STUN is flaky:
-            # - name: JVB_ADVERTISE_IPS
-            #   value: "YOUR.PUBLIC.IP.ADDR"
+            # - { name: JVB_STUN_SERVERS, value: "stun.l.google.com:19302,stun1.l.google.com:19302,meet-jit-si-turnrelay.jitsi.net:443" }
+            - { name: JVB_ENABLE_APIS, value: "rest,colibri" }
+            - { name: JVB_WS_DOMAIN, value: "meet.bstein.dev:443" }
+            - { name: JVB_WS_TLS,    value: "true" }
+            - { name: JVB_ADVERTISE_IPS, value: "38.28.125.112" }
+            - { name: JVB_TCP_HARVESTER_DISABLED, value: "false" }
+            - { name: JVB_TCP_PORT, value: "4443" }
           volumeMounts:
             - { name: cfg, mountPath: /config }
       volumes:
@@ -157,11 +161,9 @@ spec:
             - { name: XMPP_AUTH_DOMAIN, value: "auth.meet.jitsi" }
             - { name: XMPP_MUC_DOMAIN, value: "muc.meet.jitsi" }
             - { name: XMPP_INTERNAL_MUC_DOMAIN, value: "internal-muc.meet.jitsi" }
-            - { name: XMPP_BOSH_URL_BASE, value: "http://jitsi-prosody.jitsi.svc.cluster.local:5280" }
+            - { name: XMPP_BOSH_URL_BASE, value: "https://meet.bstein.dev" }
             - { name: ENABLE_XMPP_WEBSOCKET, value: "1" }
             - { name: ENABLE_COLIBRI_WEBSOCKET, value: "1" }
-            # Optional: lower default quality a bit for tough links
-            # - { name: RESOLUTION, value: "360" }
           volumeMounts:
             - { name: cfg, mountPath: /config }
       volumes: